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We present an efficient and economic scheme for five-party quantum state sharing of an arbitrary 
m-qubit state with 2m three-particle Greenberger-Horne-Zeilinger (GHZ) states and three-particle 
GHZ-state measurements. It is more convenient than other schemes as it only resorts to three- 
particle GHZ states and three-particle joint measurement, not five-particle entanglements and five- 
particle joint measurements. Moreover, this symmetric scheme is in principle secure even though 
the number of the dishonest agents is more than one. Its total efficiency approaches the maximal 
value. 

PACS numbers: 03.67.Hk Quantum communication - 03.67.Dd Quantum cryptography 
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I. INTRODUCTION 

In a secret sharing, a boss, say Alice wants to send a 
secret message Ma to her two agents, say Bob and Char- 
He who are far away from Alice. Alice suspects that one 
of the two agents may be dishonest and the dishonest one 
will do harm to her benefit if he can obtain the secret mes- 
sage independently. Unfortunately, Alice does not know 
who the dishonest agent is. Alice believes that the hon- 
est agent can prevent the dishonest one from destroying 
her benefit if they act in concert. In classical secret shar- 
ing crypto-system [i] , Alice splits her secret message Ma 
into two pieces Mb and Mc, and then sends them to Bob 
and Charlie, respectively. When Bob and Charlie coop- 
erate, they can read out the message AIa — Mb ® Mc] 
otherwise, none can obtain a useful information about 
the secret message. As classical signals can be copied 
fully and freely, it is in principle impossible for Alice to 
transmit her secret message directly to her agents with 
only classical physics. An alternative is that Alice first 
creates a private key with each of the agents, and then 
encrypts the secret message with one-time pad crypto- 
system before she sends it to her agents. At present, 
quantum key distribution (QKD) [^tSI provides a secure 
way for generating a private key between two authorized 
parties. With some private keys, the three parties can 
share the secret message Ma securely. Quantum secure 
direct communication 7H10| in principle supplies a secure 
way for transmitting the messages Mb and Mc directly 
with quantum memory. 

Quantum secret sharing (QSS) is the generalization of 
classical secret sharing [1] into quantum scenario. There 
are two main goals in QSS. One is used to share a pri- 



vate key. The other is used to share a quantum infor- 
mation, i.e., an unknown state. In 1999, Hillery, Buzek 
and Berthiaunie (HBB) [il| proposed an original QSS 
scheme for sharing a private key with entangled three- 
particle Greenberger-Horne-Zeilinger (GHZ) states. Sub- 
sequently, Karlsson, Koashi and Imoto [l^l presented a 
QSS scheme for creating a private key among three par- 
ties with two-particle entangled states. Xiao et al. [IJ] 
generalized the HBB QSS scheme to the case with TV 
agents and also gave out two ways for improving the effi- 
ciency of qubits in the QSS scheme [llj . Now, there are 
a great number of QSS schemes for sharing a private key, 
including the schemes 14 421 1 with entangled quantum 
systems and those 2a-l27l| with single photons. When 
QSS is used to share an unknown state, it has to resort 
to quantum entanglement (28l - l4l| . In HBB QSS scheme 
ll|, the authors presented a scheme for controlled tele- 
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poration of an arbitrary qubit, in which the receiver can 
recover an unknown state only when he cooperate with 
the controllers. In 1999, Cleve, Gottesman and Lo [2^ 
proposed a scheme for sharing a quantum secret with 
three-dimensional quantum states. In 2004, Lance et al. 
named the branch of quantum secret sharing for quan- 
tum information "quantum-state sharing" (QSTS) 
In essence, QSTS equals to controlled teleporation 
|34| . In 2004, Li et al.[30| introduced a scheme for sharing 
an unknown single qubit with a multipartite joint mea- 
surement (i.e., multipartite GHZ-state measurement). In 
2005, Deng et al. proposed a symmetric scheme for con- 
trolled teleportation of an arbitrary two-particle state 
with a GHZ-state quantum channel [3l| and a QSTS 
scheme for sharing an arbitrary two-particle state with 
a Bell-state quantum channel [S^l. In 2006, Li et al. 
|33| proposed an efficient symmetric multiparty quan- 
tum state sharing scheme for an arbitrary m-qubit state 
with a GHZ-state quantum channel. Also, they gener- 
alized this scheme to the case for sharing an unknown 
d-dimensional quantum system [SJ]. In 2006, Deng et al. 



[40] proposed a circular QSTS scheme for sharing an ar- 
bitrary two-qubit state with two-photon entanglements 
and Bell-state measurements. Now the models for shar- 
ing an unknown state with a non-maximally entangled 
quantum channel are studied by some groups j35-t39t] . 

Although there are some QSTS schemes for sharing 
a single qubit or an m-qubit quantum system, they are 
either not economic or insecure for the case with two 
dishonest agents. For instance, the schemes in Refs. 
pll Il3l . I3ll - l38| require a five-particle GHZ-state quan- 
tum channel for sharing a unknown single-qubit state 
when they are used for five-party quantum state shar- 
ing, that in Ref. [30] requires five-particle GHZ-state 
measurements, and the schemes in Refs. [40|, |4l| can- 
not prevent two dishonest agents from eavesdropping 
the message freely when they cooperate. In this pa- 
per, we will present an efficient and economic five-party 
QSTS scheme for sharing an arbitrary m-qubit state. 
It only resorts to a three-particle GHZ-state quantum 
channel and three-particle GHZ-state measurements, not 
a five-particle GHZ-state quantum channel [31| or five- 
particle GHZ-state joint measurements (S^- Moreover, 
this scheme is secure if the number of the dishonest agents 
is more than one (no more than three). Except for the 
sender Alice, all the agents need only to take m single- 
particle measurements on their particles for controlling 
the receiver to reconstruct the unknown quantum state. 
It is more convenient than others in a practical applica- 
tion. As almost all the quantum resource can be used to 
sharing the quantum information and the classical infor- 
mation exchanged is minimal, the total efficiency in this 
scheme approaches the maximal value. 



II. ECONOMIC FIVE-PARTY QSTS SCHEME 
FOR SHARING A SINGLE-QUBIT STATE 

For three-particle maximally entangled quantum sys- 
tems, the eight GHZ states can be written as follows: 
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where |0) and |1) are the two eigenstates of the Pauli 
operator ct^, called it Z measuring basis (MB) (for ex- 
ample, the polarization of photons along the z-direction, 
and |0) and |1) represent the horizontal and the vertical 
polarizations). 

For sharing an arbitrary qubit x which is in the state 
\x)x = a|0) -t-/3|l) among the five parties, say Alice, Bob.; 
{i — 1,2,3), and Charlie, the boss Alice first shares two 
three-particle GHZ states |^o) with her four agents (see 
Fig.l). That is, Alice shares a three-particle GHZ state 
|\E'o)aiBiB2 with Bobi and Bob2, and shares another 
three-particle GHZ state |^o)a2B3C with Bobs and Char- 
lie. Alice keeps the particles Ai and A2. Alice can share 
securely the GHZ states with her agents by using the 
decoy-photon technique [42] . In detail, when Alice wants 
to share a sequence of three-particle GHZ states with her 
agents Bobi and Bob2 (or Bobs and Charlie), she pre- 
pares some decoy photons which are randomly in one of 
the four states {|0), \l),\+x) = -^{\0) + |1)), | ~ x) = 

4=(|0) — |1))} and then inserts them in the two sequences 
of the GHZ-state particles. Alice sends the two sequences 
to her two agents, respectively. Alice and her agents can 
exploit the decoy photons to check the security of the 
transmission 14311. 
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FIG. 1: The principle of this QSTS scheme. The three 
particles linked with the dashed lines are in the GHZ state 
l^o)- The round represents a three-particle GHZ-state mea- 
surement. 



After setting up the quantum channel (two sequences 
of GHZ states) with her agents, Alice can transfer her 
quantum information (the unknown state) to the parti- 
cles controlled by all the agents. In detail, Alice performs 
a three-particle GHZ-state measurement on the particles 
X, Ai, and A2, and the quantum information of the un- 
known qubit X will be transferred into the subsystem 
composed of the four particles Bi, B2, -B3, and C. The 
four agents can extract the quantum information with 
cooperation as the state of the composite quantum sys- 
tem comprising the seven particles x, Ai, A2, -Bi, B2, 
B3, and C can be written as 
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When Alice gets the outcome \'^o)xAiA2j the subsys- 
tem composed of the particles controlled by all the four 
agents collapses to the state 0o = ct\Q0}BiB2\^^)B3C + 
/3|11)biS2|11)s3C- The three controllers Bob 1, Bob2, and 
Bobs take a measurement with the basis X on their par- 
ticles Bi, B2, and B^, respectively. If the number of 
the controllers who obtain the outcome | -|- x) is even, 



J 



the particle C will collapse to the state a|0) -I- /?|1) and 
Charlie needs doing nothing on his particle for recover- 
ing the originally unknown state |x); otherwise, the state 
of the particle C becomes a|0) — /3|1) and Charlie needs 
performing a phase- flip operation ct^ = |0)(0| — |1)(1| on 
the particle C to recover the unknown state |x)- 
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TABLE I: The relation between the unitary operations used 
for recovering the unknown state and the outcomes obtained 
by Alice, Bobi, Bob2, and Bobs. 
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When Alice gets the other outcomes with GHZ- 
state measurements on the particles x, Ai, and yl2, 
the relation between the outcomes obtained by the 
controllers and the unitary operations needed for re- 
covering the unknown state |x) = a|0) -I- /3|1) is 
shown in Table HI Here VxAiA2 is the value of 
the outcome obtained by Alice. We code the states 
{\^o)xAtA2A^i)xAiA2,\^i)xA-,A2A'^5)xAtA2} as and 

the states {|*2)i:AiA2, 1*3)2^/11^2, l*6)xyliA2, I*7)xAiA2} 

as 1. For example, T4aiA2 = if Alice gets the out- 
come |*o)2;yiiyi2 with her GHZ-state measurement. In 
this table, Ptotai = PaPbiPb2Pb3- Here Pa, Pbi, 



Pb2 , and Pb^ are the parities of the outcomes obtained 
by Alice, Bobj, Bob2, and Bobs, respectively. Simi- 
lar to Refs. |3ll - l33| . we code the parities of the states 

{\'^0)xAiA2,\'^2)xAiA2A'^i)xAiA2A^6)xAtA2} aS + and 
{\^l)xAiA2,\'^3)xAiA2,\'^5)xAiA2,\'^7)xAiA2} aS -. For 

the outcomes obtained by the controllers Bobi, Bob2, 
and Bobs, the state | -I- x) represents the parity -I- and 
the state | — x) represents the parity — . 4>c is the state 
of the particle C controlled by Charlie before the unitary 
operation is done, a^, <^x, and Uy are the Pauli opera- 
tions, i.e.. 
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From Tabic |T1 one can see that Alice need only publish 
two bits of classical information about her three-particle 
GHZ-state measurement for her agents to recover the un- 
known state, not three bits of classical information. Each 
of the controllers should announce one bit of classical in- 
formation about the outcome of the measurement with 



the basis X, and the receiver Charhe can recover the un- 
known state \x) with a unitary operation. 



III. ECONOMIC FIVE-PARTY QSTS SCHEME 

FOR SHARING AN ARBITRARY m-QUBIT 

STATE 

It is straightforward to generahze this five-party QSTS 
scheme to the case for sharing an arbitrary 77i-qubit state. 
Same as Ref. [33], an m-qubit state can be described as 



where i,j,...,k € {0, 1}, and Xi, X2, ■ ■ ■, and x™ are the 
m particles in the unknown state. For sharing 771-qubit 
state \^)u, AUce should share at least m three-particle 
GHZ states |^o) with each two of her agents, i.e., set up 
a quantum channel with 2m GHZ states securely. The 
state of the composite quantum system composed of the 
particles in the unknown m-qubit state and the GHZ 
states can be written as 
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Alice can transfer the information of her unknown state 
into the particles controlled by her four agents by per- 
forming m GHZ-state measurements on her particles. 
That is, she takes a GHZ-state measurement on the par- 
ticles Xi, An, and A2i, where i is the i-th particle in the 
unknown state or the i-th GHZ state shared with her 
agents. Three agents can act as the controllers and the 
other one acts as the receiver who can recover the un- 
known TO-qubit state with the help of all the controllers. 
In this scheme, each of the controllers takes m single- 
particle measurements on his particles with the basis X, 
and tells the receiver his outcomes when they cooperate 
to recover the unknown state |^)u- 



With the information published by Alice and the three 
controllers, the receiver, say Charlie, can recover the un- 
known state. In this time, Charlie need only take the 
unitary operation Ui on the z-th (i = 1, 2, • • • , m) parti- 
cle controlled by him. After m operations are performed 
on all his particles, Charlie obtains the unknown state 
\^)u- Same as the case for sharing a single-qubit state, 
this scheme for sharing m qubits is secure if the quan- 
tum channel, two sequences of three-particle GHZ states, 
is set up securely. 



IV. DISCUSSION AND SUMMARY 



TABLE II: The relation between the values of Vi, Pi and the 
local unitary operations Ui. 
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The relation between the outcomes of measurements 
and the local unitary operations with which the receiver 
can recover the unknown state is shown in Table [Hi 
That is, Charlie can reconstruct the unknown state |^) 
according to the Table [H] if he cooperates with all the 
controllers. Here Vi is the value of the outcomes of the 
i-th GHZ-state measurement done by Alice. That is, 
I^i = if Alice takes a GHZ-state measurement on the 
particles Xi, An, and A2i, and obtains the outcomes 

{|*o)xiAi.A2., \^l)xiAxiA2ii \^i)x,AiiA2i, l*5)a;iAiiA2i}; 

otherwise, Vi — 1. Pi is the product of the parities of all 
the outcomes in the i-th measurements done by Alice 
and her agents, i.e.. Pi = PAiPBuPBiiPBai- 



As three-particle GHZ states are maximally entangled 
ones, the receiver Charlie can reconstruct the unknown 
m-qubit state |f)„ with the probability 100% in princi- 
ple if he cooperates with all the other agents, same as 
Ref. [33] ■ Certainly, without the outcomes obtained by 
the three controllers, Charlie cannot recover the unknown 
state |^)„ even though he obtains the outcome published 
by Alice. On the one hand, Charlie does not know 
whether the controllers measure their particles with the 
basis X or not. That is, Charlie does not know whether 
his particles C,; still entangles with those controlled by 
the three controllers or not. On the other hand, Charlie 
does not know how to choose his unitary operations for 
recovering the unknown state even though he knows the 
fact that all the controllers have measured their particles 
but not the outcomes. That is, he will only has the prob- 
ability -^ to get the correct result if one of the three 
controllers does not agree to cooperate as Charlie has 
only half of the chance to choose the correct operation 
for each qubit Ci according to the information published 
by Alice and the other two controller, shown in Table HIl 



In detail, when Alice obtains the value Vi = 0, Charlie 
should choose one of the two unitary operations {/, a^}; 
otherwise, he should choose one of the other two unitary 
operations {cx, Jcr^}. Charlie can divide the four unitary 
operations into two groups according to the value Vi , but 
he cannot determine which one of two operations. In a 
word, without the help of the controllers, Charlie cannot 
reconstruct the originally unknown state \S,)u- That is, 
the security of this QSTS scheme is the same as that of 
the quantum channel. As the quantum channel can be 
set up with decoy-photon technique [421 ^^^ multipar- 
tite entanglement purification |44l |. this QSTS is in prin- 
ciple secure. Also, Alice can exploit the faithful-qubit- 
transmission technique [45| to improve the efficiency for 
setting up the quantum channel in the condition with a 
collective noise. 

In this five-party QSTS scheme, all the quantum 
sources (two sequence of GHZ states shared) can be used 
to carry the quantum information if all the agents act 
in concert after the quantum channel is set up securely 
with the decoy-photon technique |42| and the faithful- 
qubit-transmission technique 45| . The proportion of the 
decoy photons is small and can be neglectable in theory. 
That is, the intrinsic efficiency for qubits 77^ = — in this 
QSTS scheme approaches 100%, same as all other QSTS 
schemes based on maximally entangled quantum channel 
[30l - l34l |. Here g„ is the number of the useful qubits in 
QSTS and qt is the number of qubits transmitted. The 
total efficiency rjt of QSTS schemes can be calculated as 
follows [33|], 
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where ht is the number of the classical bits exchanged 
for sharing the unknown states. In this five-party QSTS 
scheme, qu = <lt — 477i, and bt = 5m as Alice announces 
2m bits of outcomes of the three-particle GHZ-state mea- 
surements and each of the three controllers tells the re- 
ceiver m bits of outcomes of the measurements with the 
basis X. That is, rjt — n which is the maximal value 
for QSTS [33], higher than that (i) in the QSTS scheme 
based on Bell states ^] in the case with four agents. 

This five-party QSTS scheme for sharing an m-qubit 
state has some advantages. First, it only resorts to three- 
particle GHZ-state quantum channel, not a five-particle 
one as those in Refs. [Ill, [Ij, l3ll - [39l |. In practical, it 
is more convenient than some other QSTS schemes as 
it is more difficult for people to prepare five-particle en- 
tanglements than three-particle entanglements |46l - l48j . 
Secondly, the sender Alice need only perform three- 
particle GHZ-state measurements on her particles, not 
five-particle GHZ-state joint measurements as that in 
Ref. ^30,]. Thirdly, this QSTS scheme is in principle 
secure if the number of the dishonest agents is large than 
one (less than four). That is, it does not require that at 



most one of the agents is dishonest [40|, |4l|. Fourthly, 
the controllers need only take m, single-particle measure- 
ments on their particles for completing the task of con- 
trolling. Moreover, this QSTS scheme is a symmetric one 
in which each of the agents can act as the receiver who 
can recover the unknown state with the help of the oth- 
ers. The amount of classical information exchanged in 
this scheme is less than others, and its total efficiency 
approaches the maximal value in theory. 

Certainly, the QTS scheme shown in Ref. [30] uses Bell 
states as quantum channel for sharing a quantum infor- 
mation. If it is used for sharing an unknown state with 
four agents, the sender Alice should take a six-particle 
joint GHZ-state measurement on her particle. At the 
aspect of resource, the scheme [30| is simper than the 
present one. However, it requires six-particle joint GHZ- 
state measurements, which makes more difficult to be im- 
plemented at experiment than the present one. Also the 
second QSTS scheme in Ref. [39j| exploits non- maximally 
two-particle entangled states as quantum channel, which 
makes it more convenient than the present one at the as- 
pect of resource, similar to that in Ref. |30| . When it is 
used by the sender Alice to share a unknown state with 
her four agents, six-particle generalized GHZ-state mea- 
surements are required. At present, it is very difficult 
to prepare an entangled quantum system composed of 
more than four particles [46l - |48| . On the other hand, six- 
particle joint measurements are beyond what are avail- 
able at experiment at present. With development of tech- 
nique, those difficulties may be not the obstruct for im- 
plementing multiparty quantum state sharing efficiently. 

In summary, we have presented an efficient and eco- 
nomic scheme for five parties to share an arbitrary m- 
qubit state with three-particle GHZ states, not five- 
particle ones. The sender Alice need only perform m 
three-particle joint measurements on her particles, not 
five-particle joint measurements, and each of the three 
controllers need only take m single-particle measure- 
ments on his particles with the basis X. These two 
factors make this QSTS scheme more convenient than 
others. As almost all the quantum resource can be used 
to share the quantum information and the classical in- 
formation exchanged is minimal, the total efficiency in 
this scheme approaches the maximal value |. Moreover, 
this scheme is in principle secure even though there are 
more than one dishonest agents (less than four), different 
from that with two-photon entanglements and Bell-state 
measurements in Ref. |40|. 
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